vulnwire
7.2high

CVE-2002-1540

The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with…

Published 23 y ago · modified 4 mo ago · JSON

CVSS
7.2
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
0.4%
percentile 36%
Public exploits
0
none known

The client for Symantec Norton AntiVirus Corporate Edition 7.5.x before 7.5.1 Build 62 and 7.6.x before 7.6.1 Build 35a runs winhlp32 with raised privileges, which allows local users to gain privileges by using certain features of winhlp32.

Exploit prediction (EPSS)

0.41% probability of exploitation in the next 30 days, higher than 36% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

References

  • archives.neohapsis.com /archives/bugtraq/2002-10/0369.html · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • osvdb.org /6258 · vdb-entry, x_refsource_OSVDB, x_transferred
  • iss.net /security_center/static/10475.php · vdb-entry, x_refsource_XF, x_transferred
  • archives.neohapsis.com /archives/bugtraq/2002-10/0346.html · mailing-list, x_refsource_BUGTRAQ, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.